Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7c21c2-8a28-4243-b65d-a05725f9d780/1/0HmReeY5i4q_mcLUUdH3zl_KhnI.mft
File:                     0HmReeY5i4q_mcLUUdH3zl_KhnI.mft (raw, json)
Hash identifier:          RA9aO6Qce+SZG1kclrHLfqr+iN6P5I9AzcVZtu/NBgQ=
Subject key identifier:   15:74:60:4B:55:5E:29:B9:24:2C:4B:52:C0:40:95:A2:BD:F6:08:71
Authority key identifier: D0:79:91:79:E6:39:8B:8A:BF:99:C2:D4:51:D1:F7:CE:5F:CA:86:72
Certificate issuer:       /CN=d0799179e6398b8abf99c2d451d1f7ce5fca8672
Certificate serial:       019279BC56F797437F6440860ACBFCFC1C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0HmReeY5i4q_mcLUUdH3zl_KhnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7c21c2-8a28-4243-b65d-a05725f9d780/1/0HmReeY5i4q_mcLUUdH3zl_KhnI.mft
Manifest number:          1301
Signing time:             Fri 11 Oct 2024 04:00:39 +0000
Manifest this update:     Fri 11 Oct 2024 04:00:39 +0000
Manifest next update:     Sat 12 Oct 2024 04:00:39 +0000
Files and hashes:         1: 0HmReeY5i4q_mcLUUdH3zl_KhnI.crl (hash: x9iWcZxaBBm3uqdzuewujY9HTKrIKzXnsL4+1KzENqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:79:bc:56:f7:97:43:7f:64:40:86:0a:cb:fc:fc:1c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0799179e6398b8abf99c2d451d1f7ce5fca8672
        Validity
            Not Before: Oct 11 04:00:39 2024 GMT
            Not After : Oct 12 04:00:39 2024 GMT
        Subject: CN=1574604b555e29b9242c4b52c04095a2bdf60871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:fb:c5:35:9b:9c:11:29:22:26:4d:8a:ef:
                    e3:eb:fa:2a:f8:a4:33:00:6b:9b:4c:78:98:0d:c0:
                    3d:96:84:65:11:9f:ae:0d:1b:2b:d6:41:0c:89:b6:
                    89:40:c6:19:b6:f8:2e:92:9c:f0:ff:cf:04:c4:02:
                    3c:4d:77:a8:4e:59:6f:93:3d:69:1d:30:a7:99:75:
                    56:c8:8d:7e:0e:11:60:58:53:5f:bb:db:5d:1f:3c:
                    6d:ea:92:43:ef:6c:99:a8:3f:e3:3e:c2:5b:91:c2:
                    07:ee:86:51:77:65:c2:d5:7c:a0:ff:53:f6:fc:2f:
                    62:ad:10:42:63:0a:4f:c4:b4:00:25:ba:b0:60:2d:
                    a3:1b:80:0b:ad:5f:e4:51:6e:ea:2e:6c:3b:d9:3b:
                    12:88:39:27:95:d6:34:16:6e:a0:b4:63:20:6d:6a:
                    a4:8b:84:ca:30:6c:f6:49:bf:74:bd:8d:23:1d:ad:
                    47:99:fb:84:e8:fb:19:3d:1f:13:e6:08:6a:83:b9:
                    e3:86:f9:1f:af:a5:70:f6:79:4e:89:91:19:4b:ff:
                    a1:d7:6b:37:cc:66:1b:bf:35:a8:ae:23:4a:c1:62:
                    80:37:75:01:09:ff:3f:34:c4:3d:b0:e4:91:53:3f:
                    f7:9d:b0:4a:e1:98:29:66:fc:62:0e:eb:fa:dd:34:
                    e4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:74:60:4B:55:5E:29:B9:24:2C:4B:52:C0:40:95:A2:BD:F6:08:71
            X509v3 Authority Key Identifier:
                keyid:D0:79:91:79:E6:39:8B:8A:BF:99:C2:D4:51:D1:F7:CE:5F:CA:86:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HmReeY5i4q_mcLUUdH3zl_KhnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7c21c2-8a28-4243-b65d-a05725f9d780/1/0HmReeY5i4q_mcLUUdH3zl_KhnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7c21c2-8a28-4243-b65d-a05725f9d780/1/0HmReeY5i4q_mcLUUdH3zl_KhnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ad:0d:06:ff:01:e9:2d:c9:8a:3e:3e:3f:9b:58:aa:70:72:
         87:db:9b:cc:05:a7:3d:c9:5b:26:b4:22:17:fe:eb:b2:4d:f6:
         58:d6:16:8d:c2:6c:63:50:9f:91:1f:a6:94:b8:c2:e2:d5:cf:
         1b:35:22:bf:38:a5:dd:b2:1e:87:c5:27:2f:62:b1:c5:82:ea:
         16:0f:29:c7:93:e0:a5:32:80:91:f3:35:85:b5:87:fd:14:cb:
         d7:bd:62:4c:f0:bb:cf:a8:5f:af:ab:3d:a1:e9:95:89:3f:44:
         83:ff:d0:89:58:b3:ea:33:25:f5:30:98:d2:fb:2b:fb:3a:2c:
         69:48:80:73:d4:15:14:f9:7f:55:4d:88:ac:21:80:25:ad:c8:
         d5:80:42:f7:ae:eb:73:a4:38:0d:9b:22:0f:85:9f:8d:88:12:
         7f:d5:a8:33:eb:65:31:51:ed:c3:aa:72:bd:ee:2f:c0:47:e8:
         9d:a4:37:37:41:d4:85:c6:44:4e:f9:0f:7d:58:f3:b5:56:b8:
         61:fb:3e:03:8e:50:eb:0d:cf:cd:d6:af:8f:fc:57:46:41:c4:
         cd:7a:8b:e3:ca:d0:16:08:2f:3d:8a:9b:aa:22:a9:fa:d8:96:
         02:50:53:5f:26:73:69:ca:ad:d8:24:96:07:b5:53:a8:cb:2b:
         01:16:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----